Privacy Policy
Last updated 27 August 2026
Wrapchik is a food ordering and delivery service for the college campus shown in the app. This policy explains what personal data we process, why we use it, who receives it, how long we keep it, and how you can exercise your privacy choices.
What we collect
| Data | How we use it |
|---|---|
| Your phone number | To verify sign-in, identify your account, prevent abuse, and contact you about an order or support request. |
| Your name and hostel | To identify your order and deliver it to the selected campus hostel. Your name may also appear on staff order views. |
| Cart, waitlist, order and fulfilment details | To price and prepare your order, manage kitchen capacity and delivery, show order history, and resolve order issues. This can include selected items, quantities, instructions, timestamps and status changes. |
| Payment records | To match a payment to an order, confirm its status, trace failed or duplicate payments, and process refunds. We store amounts, gateway order or transaction references, status and timestamps. Payment initiation also sends Paytm the order details and an internal customer identifier. |
| Notification token and preferences | To send service messages about waitlist holds and order progress when you allow notifications. The token identifies your app installation for push delivery. |
| Account and device security data | To maintain sessions, support device-based sign-in, revoke access after logout, and protect accounts. This can include session version and device-passkey data. |
| Support communications | To investigate complaints, answer privacy requests, and keep a record of the resolution. This can include messages and order photos you choose to send. |
We do not request precise GPS location or access to your contacts. We do not use advertising trackers or build marketing profiles. We process network information, including IP address, for security, rate limiting and abuse prevention. Cloudflare and other infrastructure providers may also process network and device information to deliver and secure the service.
Signing in
You sign in with your phone number. We confirm it either by sending you a one-time code, or through Truecaller if you choose that option. When you sign in with Truecaller, Truecaller provides the verified phone number approved on its consent screen. We do not store the Truecaller authorization code or access token. Truecaller's own handling of your data is covered by Truecaller's privacy policy.
Payments
Paytm handles payment processing. We receive the payment amount, gateway order or transaction reference, status, and related timestamps so we can match the payment to your order and handle reconciliation or refunds. Wrapchik does not receive or store your UPI PIN, card number, or bank login credentials.
Notifications
If you allow notifications, we store a push token linked to your account. We use it for waitlist and order updates, not advertising. Push delivery is not guaranteed, so check the app for current status. You can turn notifications off in your phone settings. Logging out clears the push token held against that account.
Who can see your data
- Authorised Wrapchik staff. Staff receive the account and order details needed for their role, such as preparation, delivery, support, or refunds.
- Service providers. These include Paytm for payments; Truecaller if you choose that sign-in method; a configured WhatsApp or SMS provider for one-time codes; Expo for push delivery; and Cloudflare for hosting, storage and security.
- Authorities or advisers. We may disclose information when law requires it, to protect legal rights or safety, or to handle a dispute.
Wrapchik does not sell or rent personal data or share it for advertising.
How long we keep it
We keep account details while your account remains active. We retain order, payment, refund and support records for as long as needed for accounting, dispute handling, fraud prevention and legal obligations. We delete or de-identify data when we no longer need it, unless law requires a longer retention period.
Keeping it safe
HTTPS encrypts traffic between the app and our servers. Role-based access limits staff to the tools required for their work, and session controls let us revoke account access. No online service can guarantee complete security. Contact us if you suspect unauthorised access to your account.
Your choices
You can ask to access or correct your personal data, withdraw consent where processing relies on consent, or request account deletion. Call 95019 72435, email wrapchik2@gmail.com, or visit the counter. Include your registered phone number or a recent order number so we can verify the request. We may retain records that law, accounting, fraud prevention, or an active dispute requires us to keep.
Children
Wrapchik is intended for users aged 18 or older. We do not knowingly seek to process a child's personal data without the consent required by applicable law. A parent or guardian who believes a child has provided personal data should contact us so we can review it.
Changes
We may update this policy when our data practices or legal obligations change. We will update the date above and provide an in-app notice before a material change takes effect where practicable.
Privacy, support and grievances
Wrapchik campus restaurant
Phone: 95019 72435
Email: wrapchik2@gmail.com
Use either contact for privacy questions, account requests, order complaints, or a grievance about the service.